CVE-2026-93977

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0

Description An issue exists in the lecturer/add-single-mark.php file where manipulation of the mark variable allows for cross-site scripting (XSS), a technique used to inject malicious scripts into web pages viewed by other users. This flaw enables remote exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the mark variable in the lecturer/add-single-mark.php file until the issue is resolved.